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DETAILED ACTION 

Status of Claims 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
September 25, 2009 has been entered. 

2. Claims 1-23 are currently pending and have been examined. 

Claim Rejections - 35 USC §112 

3. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

4. Claims 1 -23 are rejected under 35 U.S.C. 1 1 2, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. Claim 1-23 recite "time independent location" and 
"without regard to an amount of time associated with entering the keystrokes", "time 
independent location of a keystroke", and "predetermined value is not based on a 
previously stored keystroke sequence", which lacks support in the specification. Claim 1 
recites, "is not based on", which is not a positive active method step and is also vague 
and indefinite. 
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Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on sale in this 
country, more than one year prior to the date of application for patent in the United States. 

6. Claims 1-3, 7, 8, 10, 11, 15, and 21 are rejected under U.S.C. 102(b) as being 
unpatentable over Kermani, U.S. Patent No. 6,895,514. 

Claim 1: 

Kermani, as shown, discloses the following limitations: 

• providing instructions stored on a memory for assigning a score to a first 
of said keystrokes [[K1]]ki (see at least column 5, lines 37-41); 

• providing instructions stored on a memory for assigning a score to 
succeeding keystrokes after [[K1]]ki based upon the time independent 
location of the keystroke in relation to another keystroke (see at least 
column 5, lines 62-67); 

• providing instructions stored on a memory for summing at least three of 
the scores of the keystrokes in the string to obtain a string score (see at 
least column 4, lines 35-38); 

• providing instructions stored on a memory for dividing the string score by 
the number of keystrokes used to determine the sum to obtain a 
normalized string score and (see at least column 4, lines 35-38); 
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• providing instructions stored on a memory for comparing the normalized 
string score to a predetermined value of normalized string scores to 
determine the likelihood that the keystroke entries are accurate, wherein 
the predetermined value is not based on a previously stored keystroke 
sequence, (see at least column 2, lines 29-32). 

Claim 2: 

Kermani, as shown, discloses the following limitations: 

• the keystroke [[K2]]k 2 is immediately after the keystroke [[K1]]ki and each 
succeeding keystroke is provided with a score based upon its location 
from a preceding keystroke (see at least column 5, lines 62-67). 

Claim 3: 

Kermani, as shown, discloses the following limitations: 

• each keystroke's score after M is based on its location in relation to the 
immediately preceding keystroke (see at least column 5, lines 62-67). 

Claim 7: 

Kermani, as shown, discloses the following limitations: 

• further comprising making a preliminary determination of a risk of fraud or 
error based upon the comparative value of the normalized string score to 
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said predetermined value of normalized string scores (see at least column 
2, lines 16-22). 



Claim 8: 

Kermani, as shown, discloses the following limitations: 

• further including calculating the normalized string scores for a plurality of 
strings, summing the normalized string scores to obtain a transactional 
score, and dividing the transactional score by the number of strings in the 
sum to obtain a normalized transactional score and determining accuracy 
based upon the value of the normalized transactional score in comparison 
to a predetermined value of normalized transactional scores (see at least 
column 4, lines 35-38). 



Claim 10: 

Kermani, as shown, discloses the following limitations: 

• a processor (see at least column 4, lines 6-17); 

• a memory coupled to said processor, said memory storing keystroke fraud 
instructions adapted to be executed by said processor to assign a score to 
a keystroke Km based upon the time independent location of the 
keystroke in relation to another keystroke Kn, t without regard to an 
amount of time associated with entering the keystrokes to sum the scores 
of the keystrokes in a string entered on the keyboard to obtain a string 
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score and to divide the sum of the keystroke scores by the number of 
keystrokes in the string to obtain a normalized string score and a means 
for comparing said normalized string score to a predetermined score to 
determine the accuracy of said keystroke entries (see at least column 4, 
lines 6-17). 

Claim 11: 

Kermani, as shown, discloses the following limitations: 

• keystroke fraud instructions are further adapted to be executed by said 
processor to store in said memory an indication of the absence of 
accuracy associated with said string based upon said normalized string 
score in comparison to a range of said predetermined scores (see at least 
column 8, lines 17-21). 



Claim 15: 

Kermani, as shown, discloses the following limitations: 

• assigning a score to a keystroke k m based upon the time independent 
location of the keystroke from another keystroke k n without regard to an 
amount of time associated with entering the keystrokes (see at least 
column 5, lines 62-67); 

• summing the scores of at least three of the keystrokes in the string to 
obtain a string score (see at least column 4, lines 35-38); 
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• dividing the sum of the keystroke scores by the number of keystrokes in 
the sum to obtain a normalized string score and comparing the same to a 
predetermined score to determine the probable accuracy of entered 
keystrokes (see at least column 4, lines 35-38 and column 2, lines 29-32). 



Claim 21: 

Kermani, as shown, discloses the following limitations: 

• means for assigning a score to a keystroke k m based upon the time 
independent location of the keystroke in relation to another keystroke 
k n without regard to an amount of time associated with entering the 
keystrokes (see at least column 5, lines 62-67); 

• means for summing the scores of the keystrokes in a string to obtain a 
string score (see at least column 4, lines 35-38); 

• means for dividing the sum of the keystroke scores by the number of 
keystrokes in the sum to obtain a normalized string score and comparing 
the same to a predetermined value indicative of possible fraud or error 
(see at least column 4, lines 35-38 and column 2, lines 16-22). 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
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invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 4-6, 9, 16, 17, 20, and 23 are rejected under U.S.C. 103(a) as being 
unpatentable over Kermani, U.S. Patent No. 6,895,514 in view of Brown, US Patent No. 
5,557,686. 

Claim 4: 

Kermani discloses the limitations as shown above. Kermani does not disclose the 
following limitation, but Brown does: 

• there is at least two intervening keystrokes between keystrokes [[K1]]ki 
and [[KN]]kn (see at least column 5, lines 28-30 and column 5, lines 57- 
61). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani to include the keystroke method of Brown since this 
allows for measuring timing between keystrokes, which ultimately aids in 
identifying the user. 



Claims 5, 6, 9, 16, 17: 

Kermani, discloses a keystroke score (col. 5, lines 62-67). Kermani does not 
disclose a whole number, linear location, and enhanced value, but Brown does: 
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• the score of keystroke k 2 . . . k n is an whole number plus the least number 
of adjacent key spaces between keystrokes ki . . . k n -i (see at least 
column 5, lines 28-38 and column 5, lines 59-61, fig. 10). 

• wherein the score of keystroke K2 is based upon the linear distance 
between keystrokes K1 and K2 (see at least column 5, lines 28-30 and 
column 5, lines 59-61). 

• further including adding an enhanced value to the score of a keystroke if 
the keystroke is shifted (see at least column 7, lines 11-17). 

• the score of keystroke k m is a whole number plus the least number of 
adjacent keys spaces between keystrokes k m and k n (see at least column 
5, lines 59-61). 

• the score of keystroke k m is based upon the linear distance between 
keystrokes k m and k n (see at least column 5, lines 28-32). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani to include the keystroke method of Brown since this 
allows for measuring timing between keystrokes, which ultimately aids in 
identifying the user. 



Claim 20: 

Kermani, discloses the limitations as shown above. Kermani does not disclose the 
following limitation, but Brown does: 
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• instructions are further adapted to be executed by said processor to 
perform the method including adding an enhanced value to the score of 
keystroke k m ,if keystroke k m is shifted (see at least column 7, lines 11-17). 
It would have been obvious to one of ordinary skill in the art at the time of 

the invention to modify Kermani to include the keystroke method of Brown since 
this allows for measuring keystroke timing, which ultimately aids in identifying the 
user. 
Claim 23: 

Kermani discloses the limitations as shown above. Kermani does not disclose 
the following limitation, but Brown does: 

• means for determining if a keystroke is shifted, and adding an enhanced 
value to the score of the keystroke if the keystroke is shifted (see at least 
column 7, lines 11-17). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani to include the keystroke method of Brown since this 
allows for measuring keystroke timing, which ultimately aids in identifying the 
user. 

9. Claims 12-14, 18, 19, and 22 are rejected under U.S.C. 103(a) as being 
unpatentable over Kermani, U.S. Patent No. 6,895,514 in view of Brown, US Patent No. 
5,557,686 and in further view of Kroll, U.S. Patent No. 6,405,922. 
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Claim 12: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• keystroke fraud instructions are further adapted to be executed by said 
processor to calculate the accuracy of an online transaction entered by 
keystroke entries on a keyboard comprising summing the normalized 
string scores for a plurality of strings to obtain a transactional score, and 
dividing the sum of the normalized string scores by the number of strings 
in the sum to obtain a normalized transactional score, whereby the 
normalized transactional score is compared to a predetermined score to 
determine the accuracy of the online transaction (see at least column 4, 
lines 47-48) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 



Claim 13: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• keystroke fraud instructions are further adapted to be executed by said 
processor to store in said memory an indication of the absence of 
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accuracy based upon said normalized transactional score (see at least 

column 4, lines 47-48). 
It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 



Claim 14: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• keystroke fraud instructions are further adapted to be executed by said 
processor to add an enhanced value to the score of certain of said 
keystrokes if said keystrokes are shifted (see at least column 4, lines 47- 
48). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 



Claim 18: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 
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• instructions are further adapted to be executed by said processor to 
perform the method including calculating the normalized string scores for 
a plurality of strings, summing the normalized string scores to obtain a 
transactional score, and dividing the sum of the normalized string scores 
by the number of strings in the sum to obtain a normalized transaction 
score and comparing the same to a predetermined score to determine the 
probability of error or fraud in said keystroke entries in said online 
transaction (see at least column 4, lines 47-55). 
It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 



Claim 19: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• instructions are further adapted to be executed by said processor to 
perform the method including determining a risk of fraud or error based 
upon the value of the normalized transactional score in comparison to one 
or more predetermined scores (see at least column 4, lines 47-55). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
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this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 



Claim 22: 

Kermani/Brown disclose the limitations as shown above. Kermani further discloses 
the following limitation: 

• means for calculating the normalized string scores for a plurality of strings 
(see at least column 4, lines 35-38); 



Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• means for summing the normalized string scores to obtain a transactional 
score (see at least column 4, lines 47-48); 

• means for dividing the sum of the normalized string scores by the number 
of strings in the sum to obtain a normalized transactional score and 
comparing the same to a predetermined score indicative of possible fraud 
or error (see at least column 4, lines 47-48). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 
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Response to Arguments 

10. Applicant's arguments filed September 25, 2009 have been fully considered but 
they are not persuasive. Applicant's arguments will be addressed in sequential order as 
they were set forth in the "Remarks" section on the above date. Applicant argues that 
Kermani dose not disclose a score that is time independent. Claim 1 clearly states 
"assigning a score to succeeding keystrokes after kr, which clearly relates to time after 
a previous keystroke. The Examiner fails to see how a normalized keystroke sequence 
is compared to a predetermined value and yet as claim 1 states, "the predetermined 
value is not based on a previously stored keystroke sequence". "Is not based on" is 
vague and indefinite in and of itself, but also a comparison between the two is 
meaningless values if there is no relation to the normalized keystroke sequence and the 
predetermined value. As acknowledged in the remarks, Kermani compares an entered 
password to a stored (predetermined) model (value). Kermani therefore discloses 
comparing a normalized string score to a predetermined value. Further arguments 
regarding "time independent" are addressed by the 35 U.S.C. 112 rejection for lack of 
support in the specification. 
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Conclusion 

1 1 . Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Thomas West whose telephone number is 571-270- 
1236. The examiner can normally be reached on Tuesday and Wednesday 7:30am - 
5pm EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Fischer can be reached on 571-272-6779. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 

Patent Application Information Retrieval (PAIR) system. Status information for 

published applications may be obtained from either Private PAIR or Public PAIR. 

Status information for unpublished applications is available through Private PAIR only. 

For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

you have questions on access to the Private PAIR system, contact the Electronic 

Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 

USPTO Customer Service Representative or access to the automated information 

system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Thomas West 
Patent Examiner 
Art Unit 3621 

/ANDREW J. FISCHER/ 

Supervisory Patent Examiner, Art Unit 3621 



